Unfortunately I am not sure about what the packets would look like. You might want to compare the ports or take a decision based on the environment you recorded the tcpdump. (These packages are not that common AFAIK)